[ LEGAL ]

Privacy Policy

Last updated: 23 June 2026  ·  Effective: 23 June 2026
Contents
  1. Who We Are
  2. What Data We Collect
  3. How We Use Your Data
  4. Legal Bases for Processing
  5. Data Sharing & Third Parties
  6. Payment Processing (PayPal)
  7. Cookies & Analytics
  8. Data Retention
  9. International Transfers
  10. Your Rights
  11. Children’s Privacy
  12. Security
  13. Changes to This Policy
  14. Contact & Complaints

01 Who We Are

Caloris Planitia Technologies Private Limited (“we”, “us”, “our”) is the data controller for personal data collected through our website and services, including the E-School Management System (“ESM Admin”) and the Online Quiz System.

Our registered office is in Kanpur, India. You can reach our privacy team at privacy@calorisplanitia.com.

This policy applies to all data subjects who interact with our website (calorisplanitia.com) or our SaaS products. It does not apply to third-party websites we may link to.

02 What Data We Collect

The data we collect depends on how you interact with us.

Account & Registration Data

DataWhen collectedRequired?
Full nameSign-up / onboardingYes
Email addressSign-up / onboardingYes
Phone numberESM Admin sign-upYes
School / organisation nameBoth productsYes
CountryESM Admin sign-upYes
Approximate student countESM Admin sign-upYes (for plan sizing)
Organisation URL slugOnline Quiz sign-upYes
Admin usernameOnline Quiz sign-upYes
Password (hashed)Online Quiz sign-upYes

Payment Data

We do not store your payment card or bank details. All payment processing is handled by PayPal. We receive only a PayPal Order ID and transaction status (see Section 6 for details).

Usage Data

When you use our products, we may collect:

Content Data

Data you create within the platform — quiz questions, student records, exam results, attendance logs — is owned by you. We process it only to provide the service.

03 How We Use Your Data

We do not sell your personal data. We do not use your data for behavioural advertising.

04 Legal Bases for Processing

Where applicable law requires a legal basis for processing, we rely on:

05 Data Sharing & Third Parties

We share personal data only in the following limited circumstances:

Service Providers (Data Processors)

Legal Requirements

We may disclose personal data if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Caloris Planitia, our users, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred as part of that transaction. We will notify affected users before their data is transferred or becomes subject to a different privacy policy.

We do not share data with advertisers, data brokers, or analytics companies for commercial profiling.

06 Payment Processing (PayPal)

Subscription payments are processed by PayPal. When you pay via PayPal:

We are not PCI-DSS compliant because we never handle raw card data. All card security is delegated to PayPal.

07 Cookies & Analytics

Our marketing website (calorisplanitia.com) uses the following cookies:

CookiePurposeDuration
Session cookieMaintaining login state within the applicationSession (deleted on browser close)
CSRF tokenSecurity: preventing cross-site request forgerySession

We do not use third-party tracking cookies, advertising pixels, or behavioural analytics services (e.g., Google Analytics) by default. If we introduce optional analytics in the future, we will update this policy and seek consent where required.

You can disable cookies in your browser settings. Disabling session cookies will prevent you from logging in.

08 Data Retention

You may request earlier deletion subject to our legal obligations (e.g., we may be required to retain billing records regardless of a deletion request).

09 International Transfers

Caloris Planitia is based in India. Our services are used internationally. Personal data may be stored on servers located in countries other than your own. We take steps to ensure that any such transfer is conducted lawfully and that appropriate safeguards are in place.

If you are in the European Economic Area (EEA) or United Kingdom, note that our cloud infrastructure may process data in India. India has been subject to adequacy discussions; in the interim we rely on standard contractual clauses or equivalent mechanisms where required.

For users in the United States, Canada, Australia, or other regions, use of our service constitutes acknowledgement that your data will be processed in India and wherever our hosting providers operate.

10 Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

To exercise any of these rights, email privacy@calorisplanitia.com. We will respond within 30 days. We may need to verify your identity before acting on a request.

11 Children’s Privacy

Our services are intended for use by administrators, teachers, and staff — adults who are 18 years or older. We do not knowingly collect personal data directly from children under 13 (or the applicable age of digital consent in your jurisdiction).

Student data (names, results, attendance) may be entered into the platform by authorised school administrators as part of the school management function. The school is responsible as data controller for that student data, and Caloris Planitia acts as data processor. Schools using our platform must ensure they have appropriate authorisation and safeguards for processing student data under applicable child-privacy laws (e.g., COPPA, FERPA, GDPR).

If you believe we have inadvertently collected personal data from a child, please contact us immediately and we will delete it.

12 Security

We implement industry-standard technical and organisational measures to protect personal data against unauthorised access, loss, or destruction, including:

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.

In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify affected users and applicable authorities in accordance with applicable law.

13 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at the address associated with your account and update the “Last updated” date above.

We encourage you to review this page periodically. Your continued use of the service after the effective date of any changes constitutes acceptance of the revised policy.

14 Contact & Complaints

For any privacy questions, requests, or concerns:

If you are located in the European Economic Area and believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority.